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(57) ABSTRACT 

A vehicle -control communication system, in which a plu- 
rality of control function units such as ECI (engine control) 
are separated into an I/O processing function and an opera- 
tion control function, and the I/O processing function for 
each control function unit comprises I/O processing nodes, 
while the operation control function is formed as one of the 
operation control nodes for each of vehicle control groups 
each obtained by integrating control function units with a 
relation therebetween into one group. Transmit-receive of 
information within each of the vehicle control groups is 
executed via any of first communication lines, while 
transmit-receive of information between the vehicle control 
groups is executed via a second communication line. 
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VEHICLE-CONTROL COMMUNICATION control module controls the other control modules as slave 

SYSTEM devices. Thus, this electronic control system for a vehicle 

can integrally control the various types of vehicle control 

HELD OF THE INVENTION and also perform multifunctional vehicle control 

The present invention relates to a vehicle-control com- 5 However, during the development of vehicles in recent 

munication system for dividing controls to a plurality of years, there have been increased cases where specifications 

devices incorporated in a vehicle into a plurality of pre- of sensors and actuators of a control module are partially 

specified control function units, detecting status information changed or specifications of operation processing are 

required for control over control function units for each of changed. In such cases, in the conventional type of vehicle - 

the plurality of control function units by a plurality of 10 control communication system, it is required to design a new 

sensors, and controlling driving of a plurality of actuators as control module again because the system is constructed by 

targets for control over the control function units according control module units. This lowers the development effi- 

to the detected status information as well as to information ciency. 

from other control function units. In addition, there are cases where different control mod- 

15 ules are combined or the way the control modules are used 

BACKGROUND OF THE INVENTION ^ d i fferent depending upon the type of vehicle. In such cases 

A plurality of processors for control have been incorpo- also, it is required to design a new control module again for 

rated in a vehicle to perform various types of vehicle control each type of vehicle, which lowers the development effi- 

by using these processors for control. For example, a pro- 2Q ciency. 

cessor for engine control has been used for controlling the Furthermore, in association with provision of many func- 

engine to compute an amount of fuel injection correspond- tions to the vehicle in recent years, there has been a tendency 

ing to a state how the engine is running and control fuel to increase the functions provided to each control module 

injection to the engine according to a result of the compu- and perform the processing at higher-speed. Further, and 

tation. In addition, each of controls such as transmission ^ also there have been tendencies that advanced throughput 

control, brake control, and auto-drive control is also realized has been demanded for each of the control modules itself 

by using each of the corresponding processors for control and the number of control modules to be incorporated in a 

respectively. vehicle has increased. Due to such reasons, an amount of 

By the way, the demands for vehicle control have been information to be transmitted and received between control 

becoming more and more sophisticated in recent years. It is 30 modules has increased. However, the conventional type of 

difficult to perform the advanced vehicle control only by communication system in which all the control modules are 

discretely providing each of the vehicle controls connected to each other by a communication unit such as a 

independently, because it is necessary to exchange informa- LAN can not speedily support such an increase in an amount 

tion between processors for various controls, namely of information for communications. Further, in the conven- 

between modules for various controls and to perform inte- 3S tional type of communication system in which a main 

grated vehicle control according to the exchanged informa- control module is used so that the main module is followed 

tion. In a vehicle-mounted communication unit disclosed in by control modules to make them execute communications 

Japanese Patent L aid-Open Publication No. SHO between the control modules, the load on the main control 

62-237895, for instance, advanced vehicle control is realized module increases. Thus, neither of the systems can suffi- 

by connecting various control modules to each other using 40 ciently support an enormous amount of information trans- 

a communication unit such as a LAN, systematizing com- mitted and received within a multifunctional vehicle, 

munications for vehicle controls, and providing integrated A unified communication system is constructed in the 

controls for various vehicle controls. conventional type of the vehicle-control communication 

Each of the various control modules detects a status of the system. Therefore, if a malfunction occurs within a control 
vehicle using sensors, subjects corrective computation if 45 module, there is now way for the other control modules to 
necessary according to the detected status of the vehicle, and know this malfunction and they keep on performing the 
controls driving of an actuator as a target for control. The control operation. In order to overcome this redundancy, the 
number of sensors and number of actuators in eluded into the system is so designed that each of the control modules 
various control modules has increased due to such an discretely monitors the status of the system on its own. 
advanced control. Further, the number of control modules is 50 However, this increases a workload on the control modules, 
also increasing in order to previously realize vehicle control Various types of vehicle -control communication system 
functions not realized so far. As a result, when various are developed by giving consideration to the multi- 
control modules are connected to each other using the above functioning of the vehicles. However, original information 
mentioned communication unit for realizing multifunctional used for vehicle control may be tampered with due to 
vehicle control without any consideration of the above 55 incorporation of an illegal communication node in a vehicle 
mentioned matter, a number of communication lines and 0 r through communications by a maliciously-intended corn- 
configuration of the unit sections related to communication munication node in accordance with advanced control pro- 
processing required for realization thereof increase. v ided for a vehicle. Further, the information for vehicle 

In order to overcome such a problem, in the electronic control may be tapped via those illegal communication node 
control system for a vehicle disclosed in Japanese Patent 60 or a maliciously- intended communication node. It has been 
Laid-Open Publication No. HEI 4-114203, for example, a desired to prevent the tampering with or tapping of infor- 
main control module that integrates a plurality of control mation before it happens. In actual cases, when vehicles 
modules into one is provided, a communication line is used having the same or similar type of vehicle-control commu- 
for connection between the plurality of control modules and nication system incorporated therein come closer to each 
the main control module, and the main control module 65 other, the various elements of information on the vehicle- 
performs centralized management and control of the plural- control communication systems interfere with each other 
ity of control modules in such a manner as if the main and cause unexpected malfunctions. It is also necessary to 
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prevent a accidents due to the malfunctions described above 
before they happen. 

SUMMARY OF THE INVENTION 

It is an object of the present invention to provide, for the 
purpose of solving the problems described above, a vehicle- 
control communication system which can flexibly and easily 
support further system development with a small amount of 
labor and time for development even under the situations of 
an increased number of control modules, speeding up, 
partial changes in specifications for the control module, and 
increasing the amount of information for communications 
between control modules in association with achievement of 
higher performance of a vehicle, and which also can enhance 
development efficiency, as well as to obtain the vehicle- 
control communication system which can prevent tampering 
with or tapping of information transmitted and received 
within the system before it happens. 

In the present invention, a plurality of control function 
units such as ECI (engine control) and ABS (anti-lock brake 
system) are divided into a plurality of control function 
groups; a plurality of I/O processing units execute, within 
each of the plurality of control function groups, processing 
that is of comparatively light load and requires real-time 
processing by a control function unit; and an operation 
processing unit executes processing requiring high-speed 
processing within each of the plurality of control function 
units such as execution of a plurality of operation processing 
corresponding to the plurality of control function units 
according to the information inputted from the plurality of 
I/O processing units and output of each result of the opera- 
tion processing to the plurality of corresponding I/O pro- 
cessing units respectively; then, within each control function 
group, a plurality of I/O processing units are connected to an 
operation processing unit by a first communication unit, 
while the plurality of control function groups are connected 
to each other by a second communication unit so that 
hierarchical communications are realized such that transmit- 
receive of information within each of the control function 
groups is performed via the first communication unit and 
transmit-receive of information between the control function 
groups is performed via the second communication unit. 

In the present invention, a first communication unit con- 
nects at least two or more of control function groups to each 
other, and between the connected control function groups, 
information to be transreceived between control function 
groups is also transmitted and received via this first com- 
munication unit. 

In the present invention, a plurality of control function 
units are further divided into or integrated into a plurality of 
I/O processing units for executing input/output processing to 
sensors and actuators corresponding to the plurality of 
control function units by the plurality of control function 
units as well as into a plurality of operation processing units 
for dividing the plurality of control function units into a 
plurality of control function groups, executing a plurality of 
operation processes corresponding to the plurality of control 
function nits according to the information inputted from the 
plurality of I/O processing units at least belonging to the 
plurality of divided control function groups, and outputting 
each result of the operation processing to the plurality of 
corresponding I/O processing units within the control func- 
tion group; and the I/O processing units are connected to the 
operation processing units by one communication unit, and 
information between the I/O processing units and the opera- 
tion processing units is transmitted and received via this 
communication unit. 
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In the present invention, a scheduler adjusts schedules for 
transmit-receive of information between the plurality of I/O 
processing units and the plurality of operation processing 
units to make the system execute efficient communication 
s processing. 

In the present invention, a scheduler is provided in any of 
the plurality of operation processing units to make any of the 
plurality of operation processing units execute scheduling by 
the scheduler. 

10 In the present invention, each of I/O processing units and 
operation control units has at least normal mode to shift to 
a status of a normal processing operation and maintenance 
mode to shift to a status of system maintenance, and a 
scheduler monitors the status of transmission by the plurality 

15 of I/O processing units and the plurality of operation pro- 
cessing units, transmits an alarm message using the com- 
munication unit to the plurality of I/O processing units and 
the plurality of operation processing units when any abnor- 
mal condition is detected, and shifts the plurality of I/O 

20 processing units and the plurality of operation processing 
units from the normal mode to the maintenance mode to 
prevent runaway or the like of the I/O processing units and 
operation processing units before it happens. 

25 In the present invention, a format of information to be 
transmitted and received by the first communication unit, 
second communication unit, and the communication unit is 
made common by using a standardized information format. 
In the present invention, each of I/O processing units and 

3 q operation processing units further comprises an identifying 
unit, which adds identifying information specific to the 
vehicle-control communication system to information to be 
transmitted via the first communication unit, second com- 
munication unit, and the communication unit, transmits the 

35 information, and also performs identification of received 
information. 

In the present invention, each of I/O processing units and 
operation processing units further comprises an encrypting/ 
decrypting unit, which encrypts information to be transmit - 
40 ted via the first communication unit, second communication 
unit, and the communication unit using an encryption key, 
and decrypts the encrypted information. 

Other objects and features of this invention will become 
apparent from the following description with reference to 
45 the accompanying drawings. 

BRIEF DESCRIPTION OF THE DRAWINGS 

FIG. 1 is a block diagram showing configuration of a 
vehicle-control communication system as Embodiment 1 of 
50 the present invention; 

FIG. 2 is a block diagram showing configuration of a 
vehicle-control communication system as Embodiment 2 of 
the present invention; 

FIG. 3 is a block diagram showing configuration of a 
vehicle-control communication system as Embodiment 3 of 
the present invention; 

FIG. 4 is a block diagram showing configuration of a 
vehicle-control communication system as Embodiment 4 of 
6Q the present invention; 

FIG. 5 is an example of a structure of a node construction 
table in Embodiment 4 of the present invention; 

FIG. 6 is an example of a structure of a transmission 
control table in Embodiment 4 of the present invention; 
65 FIG. 7 is a sequence diagram showing an example of a 
sequence of transmit-receive processing by a scheduler in 
Embodiment 4 of the present invention; 



05/24/2004, EAST Version: 1.4.1 



US 6,3< 

5 

FIG. 8 is a block diagram showing configuration of a 
vehicle-control communication system as Embodiment 5 of 
the present invention; 

FIG. 9 is a block diagram showing configuration of a 
vehicle-control communication system as Embodiment 6 of 
the present invention; 

FIG. 10 is a block diagram showing configuration of a 
vehicle-control communication system as Embodiment 7 of 
the present invention; and 

FIG. 11 A to FIG. 11 D are examples of encryption keys 
used in Embodiment 7 of the present invention. 

DESCRIPTION OF THE PREFERRED 
EMBODIMENTS 

Detailed description is made hereinafter for the preferred 
embodiments of the vehicle-control communication system 
according to the present invention with reference to the 
attached drawings. 

Embodiment 1 of the present invention will be described 
first. FIG. 1 is a block diagram showing configuration of a 
vehicle-control communication system 1 according to 
Embodiment 1 of the present invention. The vehicle-control 
communication system 1 shown in FIG. 1 is incorporated in 
a vehicle not shown therein and provides controls for 
sections in the vehicle such as engine control (ECI), auto- 
matic control (AT), throttle control (DBW), an anti-lock 
brake system (ABS), a traction control system (TCS), power 
steering control (EPS), and advanced cruise control (ACC). 
These vehicle controls are divided into three vehicle control 
groups 11 to 13. 

The vehicle control group 11 has three control functions 
of ECI function, AT function, and DBW function. The 
vehicle control group 12 has two control functions of ABS 
function and a TCS function. Finally, the vehicle control 
group 13 has two control functions of EPS function and 
ACC function. Each of the vehicle control groups 11 to 13 
contain control functions which are relatively closely related 
to each other. 

The control functions such as the operation control func- 
tions and the I/O processing functions are performed sepa- 
rately in each of the vehicle control groups 11 to 13. Further, 
control functions such as the operation control functions are 
integrated in a single module within each of the vehicle 
control groups 11 to 13. The integrated modules are realized 
as operation control nodes 21 to 23 each respectively 
corresponding to the vehicle control groups 11 to 13. 

The I/O processing functions are realized as I/O process- 
ing nodes 31a to 31c, 32a and 326, 33a and 336 formed as 
modules corresponding to the control functions respectively. 
Namely, the vehicle control group 11 has the operation 
control node 21 that provides operation control for the ECI 
function, AT function, and DBW function. Further, the 
vehicle control group 11 has the I/O processing node 31a for 
executing I/O processing required for the ECI function, the 
I/O processing node 316 for executing I/O processing 
required for the AT function, and the I/O processing node 
31c for executing I/O processing required for the DBW 
function provided therein. 

The vehicle control group 12 has the operation control 
node 22 for providing operation control for the ABS func- 
tion and TCS function. Further, the vehicle control group 12 
has the I/O processing node 32a for executing I/O process- 
ing required for the ABS function, and the I/O processing 
node 326 for executing I/O processing required for the TCS 
function. The vehicle control group 13 has the operation 
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control node 23 for providing operation control for the EPS 
function and ACC function. Further, the vehicle control 
group 13 has the I/O processing node 33a for executing I/O 
processing required for the EPS function, and the I/O 

S processing node 33b for executing I/O processing required 
for the ACC function provided therein. 

Information exchange among the vehicle control groups 
11 to 13 is performed via a communication line N2. Infor- 
mation is transmitted and received among the operation 

1° control node 21 and the I/O processing nodes 31a to 31c via 
a communication line or bus Nil within the vehicle control 
group 11. Information is transmitted and received among the 
operation control node 22 and the I/O processing nodes 32a 
and 32b via a communication line or bus N12 within the 

15 vehicle control group 12. Finally, information is transmitted 
and received among the operation control node 23 and the 
I/O processing nodes 33a and 33b via a communication line 
or bus N13 within the vehicle control group 13. 

The I/O processing node 31a in the vehicle control group 

20 11 consists of a CPU 51a as a processor having an ECI -I/O 
processing section 61a for executing I/O processing required 
for the ECI function, and a communication processing 
section 91a for executing communication processing with 
the communication line Nil. The I/O processing node 316 

25 consists of a CPU 516 as a processor having an AT-I/O 
processing section 616 for executing I/O processing required 
for the AT function, and a communication processing section 
916 for executing communication processing with the com- 
munication line Nil. 

Furthermore, the I/O processing node 31c consists of a 
CPU 51c as a processor having a DBW-I/O processing 
section 61c for executing I/O processing required for the 
DBW function, and a communication processing section 91c 

35 for executing communication processing with the commu- 
nication line Nil. The operation control node 21 in the 
vehicle control group 11 consists of a CPU 41 as a single 
processor having an ECI operation control section 41a for 
providing controls required for an operation of the ECI 

40 function, an AT operation control section 416 for providing 
controls required for an operation of the AT function, and a 
DBW operation control section 41c for providing controls 
required for an operation of the DBW function. Further, the 
operation control node 21 in the vehicle control group 11 

45 consists of a communication processing section 81 for 
executing communication processing via the communica- 
tion line Nil, and a communication processing section 71 
for executing communication processing via the communi- 
cation line N2. 

50 Similarly, the two I/O processing nodes 32a, 326 in the 
vehicle control group 12 consist of CPUs 52a, 526 as 
processors having an ABS-l/O processing section 62a, a 
TCS -I/O processing section 626, communication processing 
sections 92a, 926 for executing communication processing 

55 via the communication line N12. The operation control node 
22 consists of a CPU 42 as a single processor having an ABS 
operation control section 42a, a TCS operation control 
section 426. Further, the operation control node 22 consists 
of a communication processing section 82 for executing 

60 communication processing via the communication line N12 
and a communication processing section 72 for executing 
communication processing via the communication line N2. 

Furthermore, the two I/O processing nodes 33a, 336 in the 
vehicle control group 13 consist of CPUs 53a, 536 as 

65 processors having an EPS-I/O processing section 63a, an 
ACC-I/O processing section 636, communication process- 
ing sections 93a, 936 for executing communication process- 
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ing via the communication line N13. The operation control information to the operation control nodes 22 or 23 that 

node 23 consists of a CPU 43 as a single processor having made the access. The CPU 41 may also voluntarily transmit 

an EPS operation control section 43a, an ACC operation the information to the other operation control nodes 22 and 

control section 43b. Further, the operation control node 23 23. 

consists of a communication processing section 83 for 5 The CPU 41 transmits corresponding control information 
executing communication processing via the communica- as a resu i t 0 f operation processing to each of the I/O 
tion line N13 and a communication processing section 73 for processing nodes 31a to 31c via the communication pro- 
executing communication processing via the communica- cessing section 81 and communication line Nil. Each of the 
tion line N2. I/O processing nodes 31a to 31c receives the corresponding 

When the sensor information for the ECI function from a 10 control information via each of the communication process- 
sensor group Sla is received by the I/O processing node 31a ing sections 91a to 91c, and the CPUs 51a to 51c output the 
of the vehicle control group 11, the CPU Sla converts the control information to the actuator groups Ala to Ale 
sensor information to a prespecified information format. For respectively as actuator information. For example, the CPU 
example, when a value detected by the sensor group Sla is Sla converts the digital control information for ECI to an 
an analog voltage value, the CPU 51a converts this value to 15 analog voltage value and outputs the converted value to the 
obtain a digital value. The converted sensor information is corresponding actuator group Ala as actuator information, 
converted to a prespecified communication format by the Similarly, within the vehicle control group 12, the opera- 
communication processing section 91a and transmitted to uon control node 22 and the I/O processing nodes 32a ; 32b 
the operation control node 21 via the communication line are connected to each other by the communication line N12, 
Nil. 20 and are connected to the other operation control nodes 21, 23 

Similarly, when the sensor information for the AT func- via the communication line N2. The I/O processing nodes 

tion from a sensor group Sib is received by the I/O pro- 32a, 32b have CPUs 52a, 52b as processors respectively, 

cessing node 31b, the CPU 51b converts the sensor infor- and the operation control node 22 has a CPU 42 as a single 

mation to a prespecified information format. Then, the processor. 

converted sensor information is converted to a prespecified 25 The CPU 42 has, the ABS operation control section 42a 
communication format by the communication processing for providing controls for an operation of the ABS function 
section 91 bandwidth transmitted to the operation control anc j TCS operation control section 42b for providing con- 
node 21 via the communication line Nil. When the sensor trols for an operation of the TCS function, and process 
information for the DBW function from a sensor group Sic operation control for the ABS function and TCS function 
is received by the I/O processing node 31c, the CPU 51c within the single processor in order to generate actuator 
converts the sensor information to a prespecified informa- information for controlling driving of actuator groups A2a, 
tion format. Then, the converted sensor information is A2b according to sensor information obtained from sensor 
converted to a prespecified communication format by the groups S2a, S2b. On the other hand, the CPUs 52a, 52b of 
communication processing section 91c and transmitted to the I/O processing nodes 32a, 32b receive and convert 
the operation control node 21 via the communication line sensor information from the sensor groups S2a, S2b to a 
Nil. prespecified information format, output the converted infor- 

The operation control node 21 obtains the sensor infor- mation to the operation control node 22 via the communi- 
mation on the communication line Nil via the communi- cation line N12, and also convert control information 
cation processing section 81. When the obtained sensor 4Q received via communication line N12 to prespecified actua- 
information is information for the ECI function sent from tor information and output the converted information to the 
the I/O processing node 31a, the CPU 41 makes the ECI actuator groups A2a and A2b respectively, 
operation control section 41a execute operation processing Similarly, within the vehicle control group 13, the opera- 
tor ECI control. For example, the ECI operation control t j on control node 23 and the I/O processing nodes 33a, 33b 
section 41a generates control information to drive an actua- 45 are connected to each other by the communication line N13, 
tor group Ala related to ECI according to the sensor and are connected to the other operation control nodes 21, 22 
information for ECI and also executes operation processing v ia the communication line N2. The I/O processing nodes 
to data such as correction data if necessary. 33^ 33^ nave C PUs 53a, 53b as processors respectively, 

Similarly, when the obtained sensor information is infor- and the operation control node 23 has a CPU 43 as a single 

mation for the AT function sent from the I/O processing node 50 processor. 

31b, the CPU 41 makes the AT operation control section 41b The CPU 43 has, the EPS operation control section 43a 
execute operation processing for AT control. Also, when the f or providing controls for an operation of the EPS function 
obtained sensor information is information for the DBW anc j ACC operation control section 43b for providing con- 
function sent from the I/O processing node 31c, the CPU 41 f or an operation of the ACC function, and process 
makes the DBW operation control section 41c execute 55 operation control for the EPS function and ACC function 
operation processing for DBW control. within the single processor in order to generate actuator 
When it is necessary to obtain information required for information for controlling driving of actuator groups A3a, 
the ECI operation processing, AT operation processing, or A3b according to sensor information obtained from sensor 
DBW operation processing from the other operation control groups S3a, S3b. On the other hand, the CPUs 53a, 53b of 
nodes 22 or 23, then the CPU 41 accesses the corresponding 60 the I/O processing nodes 33a, 33b receive and convert 
operation control nodes 22, 23 via the communication sensor information from the sensor groups S3a, S3b to a 
processing section 71 and communication line N2 and prespecified information format, output the converted infor- 
acquires the necessary information. The necessary informa- mation to the operation control node 23 via the communi- 
tion may be the sensor information itself or may be a result cation line N13, and also convert control information 
of operation processed by the CPUs 42, 43. When accessed 65 received via communication line N13 to prespecified actua- 
in order to acquire information by the other operation tor information and output the converted information to the 
control nodes 22 or 23, the CPU 41 transmits corresponding actuator groups A3a and A3b respectively. 
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As described above, in Embodiment 1, functions for 
vehicle control consisting of the ECI function, AT function, 
DBW function, ABS function, TCS function, EPS function, 
and ACC function are divided into the operation control 
nodes 21 to 23 each having an operation control function and 
the I/O processing nodes 31a to 31c, 32a, 326, 33a, and 33£> 
each having an I/O processing function, and then the vehicle 
control functions are divided into three vehicle control 
groups 11 to 13 each having a close relation therein such as 
a group of the ECI function, ACC function, and DBW 
function, a group of the ABS function and TCS function, and 
a group of the EPS function and ACC function. Further, each 
of the operation control nodes 21 to 23 in these divided 
vehicle control groups 11 to 13 executes operation control 
processing included in the vehicle control group 11 to 13 by 
using the single processors 41 to 43 respectively. Further, 
within the vehicle control groups 11 to 13, information is 
received and transmitted on a network including the com- 
munication lines Nil to N13 connecting the operation 
control nodes 21 to 23 to the I/O processing nodes 31a to 
31c, 32a and 32/?, 33a and 33b respectively. On the other 
and, each of the vehicle control groups 11 to 13 executes 
communication processing with the other two among the 
vehicle control groups 11 to 13 by transmitting and receiving 
information on a communication network including the 
communication line or bus N2 connecting the vehicle con- 
trol groups 11 to 13 to each other. 

Generally, the I/O processing consisting of input process- 
ing from the sensor groups Sla to Sic, S2a, S2b, S3a, and 
S3, bandwidth output processing to the actuator groups Ala 
to Ale, A2a, A2fc, A3a, and A3& is simple and light. 
Therefore a low-speed processor can be used and also the 
processing is affected by the sensor group and actuator group 
each connected to the processor, because of that, configu- 
ration of an I/O processing node by each vehicle control 
function allows development efficiency to significantly be 
enhanced. As for the operation control processing, on the 
other hand, although there are many cases where the load on 
processing such as a correction data operation is heavy, 
provision of operation control by using a single high-speed 
processor by the divided vehicle control group results in 
integration of development environment, which makes it 
possible to enhance the development efficiency in return. 

Furthermore, in general, an amount of information to be 
transmitted and received within each of the vehicle control 
groups is large, therefore a communications network includ- 
ing one of the communication lines Nil to N13 is formed in 
each of the vehicle control groups and communications are 
executed within the vehicle control group. As a result, 
transmission and reception transmit-receive of information 
only between the nodes in each of the vehicle control groups 
may be performed, so that, in addition to efficient processing 
in the operation control node and I/O processing nodes, 
real-time vehicle control can easily be realized by making 
the network to a high-speed communications network. On 
the other hand, a vehicle control group is connected to the 
other vehicle control groups by a communications network 
including the communication line N2, therefore multifunc- 
tional vehicle control can be realized, and as information to 
be transmitted and received especially between the vehicle 
control groups is a small amount, so that a low-speed 
network with its use bandwidth suppressed to be low can be 
used. 

Namely, each of the CPUs 41 to 43 is formed with a 
high-speed processor, each of the CPUs 51a to 51c, 52a, 
52b, 53a, and 536 is formed with a low-speed processor, a 
communications network including communication lines 
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Nil to N13 is formed with a high-speed network, and a 
communications network including the communication line 
N2 can be formed with a low-speed network. With such a 
structure, multifunctional vehicle control can be executed in 

5 real time, besides, by forming a divided module of the 
operation control node and I/O processing nodes, develop- 
ment efficiency can also significantly be enhanced. 

Embodiment 2 of the present invention will be described 
here. The above mentioned Embodiment 1 has been con- 

io figured so as to transmit and receive information within each 
of the vehicle control groups 11 to 13 via the communication 
line Nil to N13 respectively and to transmit and receive 
information between the vehicle control groups 11 to 13 via 
the communication fine N2. On the contrary, Embodiment 2 

15 explained below is configured so as to make a connection for 
communication between the vehicle control groups 11 and 
12 which are closely related to each other and there is a large 
amount of information to be transmitted and received ther- 
ebetween by one communication line N21 instead of the two 

20 communication lines Nil and N12. 

FIG. 2 is a block diagram showing configuration of a 
vehicle-control communication system 2 according to 
Embodiment 2 of the present invention. As shown in FIG. 2, 
operation control nodes 21, 22 and I/O processing nodes 31a 

25 to 31c, 32a, and 32b are connected to each other via the 
communication line N21. The configuration of the other 
sections in the figure is the same as that in Embodiment 1, 
and the same reference numerals are assigned to the sections 
corresponding to those in Embodiment 1. 

This case may be considered as the one in which the 
operation control node 21 and the operation control node 22 
are into a single operation control node, but in that case, the 
configuration is the same as that in Embodiment 1. In 

35 Embodiment 2, it is necessary to maintain the vehicle 
control groups 11 to 13 shown in Embodiment 1 as far as 
development efficiency is concerned, but the case where a 
large amount of information is transmitted and received 
between the vehicle control groups 11 and 12 may interfere 

4Q with the real-time processing, and because of that, high- 
speed communications are realized via the communication 
line N21 for solution of the problem. 

Communications are hardly executed between the I/O 
processing nodes 31a to 31c and the operation control node 

45 22 via the communication line N21 or between the I/O 
processing nodes 32a, 32b and with the operation control 
node 21 via the communication line or bus N21. However, 
communications between the operation control nodes 21 and 
22 are made by using the communication line or bus N21, 

50 and information such as a result of operations in the opera- 
tion control nodes 21, 22 is transmitted and received. 

The operation control nodes 21, 22 are connected for 
communication to the other one of the operation control 
nodes 21 to 23 via the communication line N2, the operation 

55 control nodes 21, 22 are also connected via the communi- 
cation line N21. In this case, communication between the 
operation control nodes 21 and 23 and between the operation 
control nodes 22 and 23 is performed using the communi- 
cation line N2, while communication between the operation 

60 control nodes 21 and 22 is performed via the communication 
line N21. 

In Embodiment 2, it is possible to provide vehicle control 
in real time even when there is a large amount of information 
to be transmitted and received among the vehicle control 
65 groups 11 to 13 and besides there is a comparatively large 
amount of information to be transmitted and received 
between any two of the vehicle control groups. 
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Embodiment 3 of the present invention will be described 
here. Communication is executed among the vehicle control 
groups 11 to 13 connected to each other using the commu- 
nication line N2 in both Embodiments 1 and 2. However, in 
Embodiment 3, the operation control nodes 21 to 23 and the s 
I/O processing nodes 31a to 31c, 32a, 326, 33a, and 33b are 
logically connected to each other using only a single com- 
munication line N31 without provision of the communica- 
tion line N2. 

FIG. 3 is a block diagram showing configuration of a 10 
vehicle-control communication system 3 according to 
Embodiment 3 of the present invention. As shown in FIG. 3, 
the communication line N31 is formed by integrating the 
communication lines Nil to N13 in Embodiment 1 in a 
single communication line. The operation control nodes 21 35 
to 23 and the I/O processing nodes 31a to 31c, 32a, 326, 33a, 
and 33b are logically connected to this communication line 
N31. Herein, "logically" means to allocate an address to 
each of the nodes on the communication network. 

Thus, the information to be transmitted and received on 20 
the communication line N31 is the same as the information 
to be transmitted and received on the communication lines 
Nil to N13 as well as on the communication line N2 in 
Embodiment 1. In this case also, the vehicle control groups 
11 to 13 are divided into the operation control nodes 21 to 25 
23 and the I/O processing nodes 31a to 31c, 32a, 326, 33a, 
and 336 in the same manner as in Embodiments 1 and 2. 
Therefore, by speeding up the communication line including 
the communication line N31, vehicle control can be pro- 
vided in real time even for a multifunctional vehicle. 30 

In Embodiment 3, only a single communication line N31 
is provided therein, and it is not necessary to provide a 
communication line N2 used for connection between the 
vehicle control groups 11 to 13 and to provide communica- 35 
tion processing sections 71 to 73 for using the communica- 
tion line N2, Thus, the configuration is made simple, which 
allows a number of harnesses to be reduced. In addition, 
Embodiment 3 has node configuration comprising the opera- 
tion control nodes 21 to 23 and the I/O processing nodes 31a 4Q 
to 31c, 32a, 32b, 33a, and 33b similarly to that in Embodi- 
ments 1 and 2, so that even when design is to be changed 
such as addition of a new node, flexible node arrangement 
is possible only by connecting the new node to the commu- 
nication line N31, which allows development efficiency to 45 
be enhanced. 

Embodiment 4 of the present invention will be described 
here. In Embodiment 3 described above, the same commu- 
nication processing has been executed to all the nodes 21 to 
23, 31a to 31c, 32a,, 326, 33a, and 336. However, in 50 
Embodiment 4, a scheduler function for integrally control- 
ling the use of the communication line N31 is newly 
provided therein. 

FIG. 4 is a block diagram showing configuration of a 
vehicle-control communication system 4 according to 55 
Embodiment 4 of the present invention. As shown in FIG. 4, 
operation control nodes 21 to 23 and I/O processing nodes 
31a to 31c, 32a, 326, 33a, and 33 bandwidth a scheduler 
node 24 for adjusting schedules of those nodes are logically 
connected to a communication line N31. $ 0 

The scheduler node 24 has a scheduler 44 and a commu- 
nication processing section 84. The communication process- 
ing section 84 accepts requests to transmit received from the 
nodes 21 to 23 , 31a to 31c, 32a, 326, 33a, and 336 via the 
communication line N31, manages the requests by referring 65 
to a node construction table 44a and a transmission control 
table 446 each provided in the scheduler 44, and transmits 
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transmission control information to any of the nodes 21 to 
23, 31a to 31c, 32a, 326, 33a, and 336 which makes the 
request to transmit thereto via the communication line N31. 

FIG. 5 is a view showing an example of a structure of the 
node construction table 44a in the scheduler 44, and FIG. 6 
is a view showing an example of a structure of the trans- 
mission control table 446 in the scheduler 44. As shown in 
FIG. 5, priority and required bandwidth for each of' the 
operation control nodes 21 to 23 and the I/O processing 
nodes 31a to 31c, 32a, 326, 33a, and 336 which are all nodes 
connected to the communication line N31 are registered in 
the node construction table 44a. Three types of node priority 
are provided, and priorities for transmission are set in the 
nodes in order of "High" to "Middle" to "Low". The 
bandwidth required for a node is a bandwidth for using the 
communication line N31 and is set in consideration of an 
amount of information to be transmitted and received 
between nodes and an operation speed. 

Herein, a bandwidth to be used is defined in a the order 
of msec to provide time-division control. For example, a 
required bandwidth for the I/O processing nodes 31a, 316 is 
set to 10 msec, a required bandwidth for the I/O processing 
nodes 31c, 32a, 326 is set to 20 msec, and a required 
bandwidth for the I/O processing nodes 33a, 336 is set to 30 
msec. The required bandwidth for each of the operation 
control nodes 21 to 23 is zero. This is due to the fact that, 
there is generally no request to transmit from the operation 
control nodes 21 to 23 and a request to transmit is made 
when transmission and reception of data are required 
between the operation control nodes 21 to 23. Namely, a 
request to transmit from any of the I/O processing nodes 31a 
to 31c, 32a, 326, 33a, and 336 indicates that the I/O 
processing node will perform transmit-receive of informa- 
tion with any of the operation control nodes 21 to 23 
corresponding to the I/O processing node, and a bandwidth 
required for the transmit-receive of information is defined as 
a required bandwidth. 

On the other hand, the transmission control table 446 
shown in FIG. 6 is generated according to the priorities and 
required bandwidthes of nodes set in the node construction 
table 44a, and a transmission cycle allocated to each node 
from its required bandwidth, a transmission history, and a 
node status for each node are updated and stored therein. The 
scheduler 44 provides controls for transmission timing cor- 
responding to each node. "Transmission history" indicates 
that, when a plurality of requests to transmit are retained in 
a reception buffer not shown herein as a queue, the process- 
ing status of the queue is stored therein as a history. 

In the example of "Transmission history" shown in FIG. 
6, the I/O processing node 31c is shown as "being 
transmitted", which indicates that transmission processing 
by the I/O processing node 31c is currently been executed. 
On the other hand, the I/O processing nodes 32a, 326, 33a, 
and 336 are shown as "not yet transmitted", which indicates 
that the I/O processing nodes are in a standby status for 
transmission. The I/O processing nodes in a standby status 
for transmission are transmitted in order of priority. "Node 
status" indicates that whether each node is normally oper- 
ating or not is monitored and a result of monitoring is 
updated and stored therein. As described later, when a 
certain node shows its status as "abnormal", the scheduler 44 
transmits an alarm message to each of the nodes. 

Next description is made for an example of transmission 
control by the scheduler 44 with reference to FIG. 7. FIG. 7 
is a diagram showing an example of a sequence of trans- 
mission control by the scheduler 44, and shows an example 
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when a request to transmit is made from the I/O processing 
nodes 31a and 31c. 

In FIG. 7, at first, when requests to transmit are succes- 
sively made from the I/O processing nodes 31a and 31b to 
the scheduler 44 (SI, S2), the scheduler 44 changes the 
transmission history in the transmission control table 44b to 
a not-yet-transmitted status, and then, transmits a message 
on permission to transmit to the high-priority I/O processing 
node 31 a (S3). The I/O processing node 31a having received 
the message to that effect transmits acknowledgement indi- 
cating reception of the message to that effect to the scheduler 
44 (S4), and then, transmits data for detected information to 
the operation control node 21 for performing the ECI control 
processing (S5). The operation control node 21 having 
received the data for detected information executes opera- 
tion processing by the ECI operation control section 41a, 
and transmits data for a result of operation to the I/O 
processing node 31a (S6). 

Then the scheduler 44 of the scheduler node 24 transmits 
a message on permission to transmit to the I/O processing 
node 31b (ST), and the I/O processing node 31b having 
received the message transmits acknowledgement indicating 
reception of the message to the scheduler node 24 (S8). 
Further, the I/O processing node 31b transmits data for 
detected information to the operation control node 21 for 
performing the AT control processing (S9). On the other 
hand, the operation control node 21 having received the data 
for detected information executes operation processing by 
the AT operation control section 41bandwidth transmits data 
for a result of operation to the I/O processing node 31b 
(S10). 

Data transmission and reception by the I/O processing 
nodes 31a, 31b are executed within the above mentioned 
transmission cycle 10 msec. In this case, although it is 
programmed that the scheduler node 24 transmits a message 
on permission to transmit to the I/O processing node 31b in 
response to completion of the transmission cycle of the I/O 
processing node 31a, it may be programmed that each of the 
I/O processing nodes 31a, 316 transmits discretely a mes- 
sage on completion of transmission to the scheduler node 24, 
and the scheduler node 24 receives the message and trans- 
mits a message on permission to transmit to the next I/O 
processing node. 

Data transmission and reception between the operation 
control nodes 21 to 23 are executed by a request to transmit 
from the operation control nodes 21 to 23 as described 
above. In this case, the scheduler node 24 also transmits a 
message on permission to transmit to any of the operation 
control nodes 21 to 23 that makes a request to transmit, and 
the operation control node having received the message 
transmits acknowledgement indicating reception of the mes- 
sage to the scheduler node 24, and then data transmission 
and reception are executed between the operation control 
nodes. 

Under control of transmission management by the sched- 
uler 44 as described above, any trouble such as a collision 
when there are a plurality of requests to transmit from the 
nodes can be eliminated, transmit-receive of information can 
systematically be controlled, which allows the efficient use 
of the communication line N31 to significantly be enhanced. 
This can realize real-time control even when control is 
provided for any multifunctional vehicle. 

The scheduler 44 monitors the status of each node accord- 
ing to information passing on the communication line N31 
and updates and stores therein a result of monitoring as 
"node status" in the transmission control table 44b. For 



i0 5 152 Bl 

14 

example, there comes up a case where a certain I/O pro- 
cessing node transmits acknowledgement indicating recep- 
tion of a message on permission to transmit and data is not 
transmitted thereafter, or a case where data is transmitted 

s from an I/O processing node other than the I/O processing 
node that has transmitted the message on permission to 
transmit, the scheduler 44 sets the node status of the corre- 
sponding I/O processing node to "abnormal", and broadcasts 
an alarm message to all the operation control nodes and I/O 

10 processing nodes connected to the communication line N31. 
While each of the operation control nodes and I/O pro- 
cessing nodes has normal operation mode for performing a 
normal operation for vehicle control and maintenance mode 
for controlling the node to shift to a predetermined safety 

15 status when any abnormal condition occurs, and all the 
operation control nodes and I/O processing nodes having 
received the alarm message forcefully shifted from the 
normal operation mode to the maintenance mode. 
The scheduler 44 monitors the status of operation control 

20 nodes and I/O processing nodes by monitoring information 
on the communication line N31, and broadcasts an alarm 
message to all the nodes when any abnormal condition 
occurs to make the nodes shift from the normal operation 
mode to the maintenance mode, so that a control function of 

25 the vehicle-control communication system can be main- 
tained in safety. Consequently, any vehicle accident due to 
some trouble of the vehicle-control communication system 
can be prevented before it happens. 

By the way, a format of data transmitted and received on 

30 the communication line N31 can be set, for instance, by each 
of the vehicle control groups 11 to 13. However, it is 
preferable to integrate formats of data transmitted and 
received by the operation control nodes and I/O processing 
nodes into a standardized data format and use it as far as 

35 communications are executed on the identical communica- 
tion line N31. 

By previously integrating formats to the standardized 
format described above, the design can easily be changed 
40 even when an operation control node, especially an I/O 
processing node has to be added or changed, which makes 
it easy to support for flexible construction of a vehicle - 
control communication system. 

Embodiment 5 of the present invention will be described 
45 here. In Embodiment 4 described above the scheduler 44 is 
connected to the communication line N31 as the scheduler 
node 24. On the contrary, in Embodiment 5, the scheduler 44 
is incorporated in an operation control node with a CPU 
capable of high-speed processing. 
50 FIG. 8 is a block diagram showing configuration of a 
vehicle-control communication system 5 according to 
Embodiment 5 of the present invention. As shown in FIG. 8, 
the CPU 43 in the operation control node 23 has a scheduler 
section 43c having the same configuration as that of the 
55 scheduler 44 in Embodiment 4, The rest of the configuration 
of this system is the same as the system in Embodiment 4 
without the scheduler node 24. The configuration of the 
other sections is the same as that in Embodiment 4, and the 
same reference numerals are assigned to the sections corre- 
60 sponding to those in Embodiment 4. 

The CPU with the scheduler section 43c to be provided 
therein is preferably included in a CPU of any operation 
control node having a CPU with sufficiently high processing 
capability because the load on the CPU increases due to 
65 addition of the scheduler section 43c thereto. 

With Embodiment 5, it is not necessary to provide the 
special scheduler node 24 to be connected to the cornmu- 
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nication line N31 as shown in Embodiment 4, so that a 
number of harnesses or the like can be reduced and also the 
need for a communication processing section 84 with which 
the scheduler node 24 performs communication processing 
to the communication line N31 can be eliminated, which 5, 
makes simpler the system configuration itself. 

Embodiment 6 of the present invention will be described 
here. In Embodiment 3 described above, when transmit- 
receive of information is performed via the communication 
line N31, each of the nodes at least adds an address of a ]Q 
target node for transmission to information and transmits the 
information thereto, and the target node for transmission 
executes reception processing when the received address is 
coincident with the address of the node. However, in 
Embodiment 6 described below, in addition to the ]5 
configuration, the communication processing section of each 
node has an identifying section for adding identifying infor- 
mation specific to nodes, namely specific to a vehicle- 
control communication system to information and transmit- 
ting the information and identifying the information with the 2Q 
specific identifying information added thereto further pro- 
vided therein. 

FIG. 9 is a block diagram showing configuration of a 
vehicle-control communication system 6 according to 
Embodiment 6 of the present invention. In FIG. 9, the 25 
communication processing sections 81 to 83, 91a to 91c, 
92a, 926, 93a, and 93b of the operation control nodes 21 to 
23 as well as of the I/O processing nodes 31a to 31c, 32a, 
326, 33a, and 336 have identifying sections 101 to 103, 111a 
to 111c, 112a, 1126, 113a, and 1136 respectively. 30 

The configuration of the other sections is the same as that 
in Embodiment 3, and the same reference numerals are 
assigned to the sections corresponding to those in Embodi- 
ment 3. Those identifying sections add identifying informa- 
tion specific to a vehicle -control communication system 6 to 35 
information and execute processing for identifying the spe- 
cific identifying information from the received information. 
Therefore, only by making the specific identifying informa- 
tion different, even if there is another vehicle-control com- 
munication system having the same configuration as that of 40 
the vehicle-control communication system 6 as far as that of 
the address arrangement thereof, the vehicle-control com- 
munication systems can easily be identified from each other, 
thus interference between the systems and tampering with 
information in another vehicle-control communication sys- 45 
tem being prevented. 

With Embodiment 6, a real situation such that vehicles 
with vehicle-control communication systems with the same 
or the similar type of configuration as each other on pro- 
duction lines incorporated therein are shipped, but even 50 
when the vehicles each incorporating therein the vehicle- 
control communication system with the same or the same 
type of configuration are located closed to each other, 
transmit-receive of information is executed by using iden- 
tifying information specific to each vehicle, so that interfer- 55 
ence between the systems will never occur and any vehicle 
accident or the like encountered due to tampering with 
information can be prevented before it happens. In addition, 
tampering with an operation control node and an I/O pro- 
cessing node executed by a user having ill will can be $o 
prevented. 

The identifying section in this embodiment may be pro- 
vided in each of the communication processing sections in 
the other Embodiments 1, 2, 4, and 5 in the similar manner 
as described above so that tampering with information or the 65 
like due to interference between vehicle-control communi- 
cation systems can be prevented before it happens. 
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Furthermore, it is needless to say that the identifying 
section is not necessarily provided inside the communication 
processing section and may be provided inside the node. 

Embodiment 7 of the present invention will be described 
here. In Embodiment 6 described above, there is provided an 
identifying section for allocating a specific identifying infor- 
mation to each vehicle-control communication system, add- 
ing this specific identifying information to information, and 
identifying the specific identifying information. On the 
contrary, in Embodiment 7 described below, information to 
be transmitted and received via the communication line N31 
is encrypted by allocating an encryption key specific to each 
node thereto. 

FIG. 10 is a block diagram showing configuration of a 
vehicle-control communication system 7 according to 
Embodiment 7 of the present invention. In FIG. 10, the 
communication processing sections 81 to 83., 91a to 91c, 
92a, 92b, 93a, and 93b of the operation control nodes 21 to 
23 as well as of the I/O processing nodes 31a to 31c, 32a, 
326, 33a, and 336 have encrypting/decrypting sections 121 
to 123, 131a to 131c, 132a, 1326, 133a, and 1336 respec- 
tively. The configuration of the other sections is the same as 
that in Embodiment 3, and the same reference numerals are 
assigned to the sections corresponding to those in Embodi- 
ment 3. Each of those encrypting/decrypting sections has the 
same encryption key for each control function. 

As shown in FIG. 11A, for example, the encrypting/ 
decrypting section 121 in the communication processing 
section 81 of the operation control node 21 has three 
encryption keys Kl to K3 as targets for operation control 
provided by a CPU 41. The encryption keys Kl to K3 are 
provided for ECI control, AT control, and DBW control 
respectively. Further, as shown in FIG. 11B to FIG. 11 D, on 
the other hand, the encrypting/decrypting section 131a in the 
communication processing section 91a of the I/O processing 
node 31a has the encryption key Kl for ECI control, the 
encrypting/decrypting section 1316 in the communication 
processing section 916 of the I/O processing node 316 has 
the encryption key K2 for AT control, and the encrypting/ 
decrypting section 131c in the communication processing 
section 91c of the I/O processing node 31c has the encryp- 
tion key K3 for DBW control. 

For instance, when information is to be transmitted from 
the I/O processing node 31a to the operation control node 21 
via the communication line N31, at first, the encrypting/ 
decrypting section 131a encrypts the information to be 
transmitted using the encryption key Kl, and transmits the 
encrypted information to the operation control node 21 via 
the communication line N31. The encrypting/decrypting 
section 121 in the communication processing section 81 of 
the operation control node 21 selects the encryption key Kl 
for ECI control, for instance, by referring to the address, 
decrypts received information using the selected encryption 
key Kl, and transmits the decrypted information to the CPU 
41. It should be noted that information to be encrypted may 
be a body of the information excluding header contents such 
as address, or may be a portion of the body of the informa- 
tion. 

Herein, transmit-receive of information is executed 
between the operation control nodes 21 to 23 via the 
communication line N31, and an encryption key correspond- 
ing to the operation may be provided. In this case, each of 
the operation control nodes 21 to 23 has encryption keys for 
all the nodes. There is obviously, in many cases, a smaller 
amount of information to be transmitted and received 
between the operation control nodes 21 to 23, therefore, 
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there is a choice not to encrypt the information to be 
transmitted and received between the operation control 
nodes 21 to 23. 

The above mentioned encryption/decryption processing 
employs a common-key cryptosystem in which a local node s 
and a partner node have the same encryption key and 
encryption and decryption are performed using the same 
encryption key, but a method is not limited to the method 
described above, and a public-key cryptosystem may be 
used. It should be noted that the common-key cryptosystem 10 
has a simpler operation for encryption/decryption as com- 
pared to that of the public -key cryptosystem, so that a time 
required for encryption/ decryption is shorter, thus employ- 
ment of the common-key cryptosystem being preferable for 
realizing real-time processing. 15 

With Embodiment 7, since information transmitted and 
received via the communication line N31 is encrypted, it is 
difficult to decrypt the contents itself of the information even 
if the information can be intercepted, leakage of and tam- 
pering with information can be prevented, which allows 2 o 
safety of the vehicle-control communication system to be 
enhanced and a vehicle accident to eventually be prevented 
before it happens. 

As described above, with the present invention, a plurality 
of control function units such as ECI (engine control) and 25 
ABS (anti-lock brake system) are divided into a plurality of 
control function groups; a plurality of I/O processing units 
execute, within each of the plurality of control function 
groups, processing that is comparatively light load such as 
input/output processing to sensors and actuators correspond- 30 
ing to a plurality of control function units within the control 
function group by a control function unit; and an operation 
processing unit executes processing requiring high-speed 
processing within each of the plurality of control function 
units such as execution of a plurality of operation processing 35 
corresponding to the plurality of control function units 
according to the information inputted from the plurality of 
I/O processing units and output of each result of the opera- 
tion processing to the plurality of corresponding I/O pro- 
cessing units respectively; then, within each control function 40 
group, a plurality of I/O processing units are connected to an 
operation processing unit by a first communication unit, 
while the plurality of control function groups are connected 
to each other by a second communication unit so that 
hierarchical communications are realized such that transmit- 45 
receive of information within each of the control function 
groups is performed via the first communication unit and 
transmit-receive of information between the control function 
groups is performed via the second communication unit, so 
that by forming each of the I/O processing units with a 50 
low-speed processor and an operation processing unit with 
a high-speed processor, load distribution is appropriately 
performed and also development efficiency can significantly 
be enhanced even under the situation that there frequently 
come up changes in design such as a partial change in 55 
design, addition of a control function, and deletion of a 
control function because there is characteristics that an I/O 
processing unit has a processing function specific to the unit 
while an operation processing unit executes processing 
similarly between control function groups. 60 

Further, the control function group originally includes a 
plurality of control function units, and based on the fact that 
there is a large amount of information transreceived within 
the control function group while there is a small amount of 
information transreceived between the control function 65 
groups, by forming the first communication unit with a 
network capable of high-speed communications and the 
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second communication unit with a network capable of 
low-speed communications, the load on the communication 
functions is appropriately distributed, so that separation of 
the I/O processing units from the operation processing unit 
makes it possible to execute real-time processing even in 
controls for a vehicle whose high performance is required. 

With the invention according to another aspect of the 
present invention, a first communication unit connects at 
least two or more of control function groups to each other, 
and between the connected control function groups, infor- 
mation to be transreceived between control function groups 
is also transmitted and received via this first communication 
unit, so that when control function groups having a com- 
paratively close relation and requiring transmit-receive of 
information therebetween are present in the divided control 
function groups, a real-time processing for vehicle control 
can easily and simply be realized without speeding-up of the 
second communication unit. 

With the invention according to another aspect of the 
present invention, a plurality of control function units are 
further divided into or integrated into a plurality of I/O 
processing units for executing input/output processing to 
sensors and actuators corresponding to the plurality of 
control function units by the plurality of control function 
units as well as into a plurality of operation processing units 
for dividing the plurality of control function units into a 
plurality of control function groups, executing a plurality of 
operation processing corresponding to the plurality of con- 
trol function units according to the information inputted 
from the plurality of I/O processing units at least belonging 
to the plurality of divided control function groups, and 
outputting each result of the operation processing to the 
plurality of corresponding I/O processing units within the 
control function group; and the I/O processing units are 
connected to the operation processing units by one commu- 
nication unit, and information between the I/O processing 
units and the operation processing units is transmitted and 
received via this communication unit, so that by forming 
each of the I/O processing units with a low-speed processor 
and an operation processing unit with a high-speed 
processor, load distribution is appropriately performed to be 
possible real-time processing in controls for a high- 
performance vehicle, and also development efficiency can 
significantly be enhanced even under the situation that there 
frequently come up changes in design such as a partial 
change in design, addition of a control function, and deletion 
of a control function because there is characteristics that an 
I/O processing unit has a processing function specific to the 
unit while an operation processing unit executes processing 
similarly between control function groups, and that the I/O 
processing units and operation processing units are con- 
nected to one communication unit respectively. 

Further, since the I/O processing units and operation 
processing units are connected to one communication unit, 
arrangement of the I/O processing units and operation 
processing units can be flexible and also system configura- 
tion is simpler because of a small number of wiring, and 
from this point of view, development efficiency can signifi- 
cantly be enhanced. 

With the invention according to another aspect of the 
present invention, a scheduler adjusts schedules for 
transmit-receive of information between the plurality of I/O 
processing units and the plurality of operation processing 
units to make the system execute efficient communication 
processing, so that it is possible to reduce wasteful commu- 
nications made for avoiding collision when there are a 
plurality of requests to transmit from the I/O processing 
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units and operation processing units, transmit-receive of 
information can systematically be controlled, and efficient 
use of the communication line can significantly be 
enhanced, which allows, resultantly, controls for a vehicle 
whose high performance is required to be executed in real 
time. 

With the invention according to another aspect of the 
present invention, a scheduler is provided in any of the 
plurality of operation processing units to make any of the 
plurality of operation processing units execute scheduling by 
the scheduler, so that it is not necessary to provide a 
particular module with a scheduler function, which allows 
configuration for connection of the scheduler to a commu- 
nication unit to be reduced. 

With the invention according to another aspect of the 
present invention, each of I/O processing units and operation 
control units has at least normal mode to shift to a status of 
a normal processing operation and maintenance mode to 
shift to a status of system maintenance, and a scheduler 
monitors the status of transmission by the plurality of I/O 
processing units and the plurality of operation processing 
units, transmits an alarm message using the communication 
unit to the plurality of I/O processing units and the plurality 
of operation processing units when any abnormal condition 
is detected, and shifts the plurality of I/O processing units 
and the plurality of operation processing units from the 
normal mode to the maintenance mode to prevent runaway 
or the like of the I/O processing units and operation pro- 
cessing units before it happens, so that safety of the vehicle- 
control communication system can be maintained and any 
vehicle accident or the like due to some trouble of the 
vehicle-control communication system can be prevented 
before it happens. 

With the invention according to another aspect of the 
present invention, a format of information to be transmitted 
and received by the first communication unit, second com- 
munication unit, and the communication unit is made com- 
mon by utilizing a standardized information format, so that 
even when there comes up a design change such as addition 
or change of an operation processing unit or an I/O process- 
ing unit, the design can easily be changed, which allows a 
flexible vehicle-control communication system to easily be 
constructed. 

With the invention according to another aspect of the 
present invention, each of I/O processing units and operation 
processing units further comprises an identifying unit, which 
adds identifying information specific to the vehicle-control 
communication system to information to be transmitted via 
the first communication unit, second communication unit, 
and the communication unit, transmits the information, and 
also performs identification of received information, so that 
there are vehicles each with the same or the same type of 
vehicle-control communication system incorporated therein 
and even when the vehicles each with the same or the same 
type of vehicle-control communication system incorporated 
therein happen to be located close to each other, information 
is transmitted and received by using identifying information 
specific to each of the vehicle-control communication 
systems, which allows any vehicle accident or the like due 
to tampering with the information to be prevented before it 
happens without interference with each other. In addition, it 
is also possible to prevent illegal modification to an opera- 
tion control node or an I/O processing node by an ill-will 
user. 

With the invention according to another aspect of the 
present invention, each of I/O processing units and operation 
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processing units further comprises an encrypting/decrypting 
unit, which encrypts information to be transmitted via the 
first communication unit, second communication unit, and 
the communication unit using an encryption key, and 

s decrypts the encrypted information, so that even if informa- 
tion transreceived via the first communication unit, second 
communication unit, and the communication unit can be 
intercepted, because the information has been encrypted, the 
contents itself is hard to be decrypted, which results in 

10 elimination of leakage of or tampering with information, 
thus safety of the vehicle -control communication system 
being enhanced, which resultantly allows a vehicle accident 
to be prevented before it happens. 
Although the invention has been described with respect to 

1 5 a specific embodiment for a complete and clear disclosure, 
the appended claims are not to be thus limited but are to be 
construed as embodying all modifications and alternative 
constructions that may occur to one skilled in the art which 
fairly fall within the basic teaching herein set forth. 

20 What is claimed is: 

1. A vehicle-control communication system for dividing 
controls for a plurality of devices incorporated in a vehicle 
to a plurality of prespecified control function units, detecting 
status information required for controlling the correspond - 

25 ing control function unit by a plurality of sensors by the 
plurality of control function units, and controlling driving of 
a plurality of actuators each as a target for control by the 
corresponding control function unit according to the 
detected status information and information from the other 

30 control function units; wherein 

the plurality of control function units are divided into a 

plurality of control function groups; and 
each of said plurality of control function groups com- 

35 Prises 

a plurality of I/O processing units for executing input/ 
output processing to said sensors and said actuators 
corresponding to a plurality of control function units in 
the corresponding control function group by the plu- 

40 rality of control function units; 

an operation processing unit for executing a plurality of 
operation processing corresponding to the plurality of 
control function units according to the information 
inputted from the plurality of I/O processing units, and 

45 outputting each result of the operation processing to the 
plurality of corresponding I/O processing units respec- 
tively; and 

a first communication bus for connecting said plurality of 
I/O processing units to each other and to said operation 
50 processing unit; and 

said plurality of control function groups are connected to 
each other by a second communication bus for con- 
necting said operation processing units to each other 
within the plurality of control function groups. 
55 2. The vehicle -control communication system according 
to claim 1; wherein said first communication unit within the 
plurality of control function groups connects at least two or 
more of said control function groups to each other. 

3. The vehicle -control communication system according 
60 to claim 1; wherein a format of information to be transmitted 

and received by said first communication unit, said second 
communication unit, and said communication unit is a 
standardized information format. 

4. The vehicle -control communication system according 
65 to claim 1; wherein each of said plurality of I/O processing 

units and said plurality of operation processing units further 
comprises an identifying unit for adding identifying infor- 
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mation specific to the vehicle-control communication sys- 
tem to information to be transmitted via said first commu- 
nication unit, said second communication unit, and said 
communication unit, transmitting the information, and also 
performing identification of received information. $ 

5. The vehicle-control communication system according 
to claim 1; wherein each of said plurality of I/O processing 
units and said plurality of operation processing units further 
comprises an encrypting/decrypting unit for encrypting 
information to be transmitted via said first communication 1Q 
unit, said second communication unit, and said communi- 
cation unit using an encryption key, and decrypting the 
encrypted information. 

6. A vehicle -control communication system for dividing 
controls for a plurality of devices incorporated in a vehicle 

to a plurality of prespecified control function units, detecting 15 
status information required for controlling the correspond- 
ing control function unit by a plurality of sensors by the 
plurality of control function units, and controlling driving of 
a plurality of actuators each as a target for control by the 
corresponding control function unit according to the 20 
detected status information and information from the other 
control function units; said system comprising: 

a plurality of I/O processing units for executing input/ 
output processing to said sensors and said actuators 
corresponding to the plurality of control function units 2 5 
by said plurality of control function units; 
a plurality of operation processing units for dividing said 
plurality of control function units into a plurality of 
control function groups, executing a plurality of opera- 
tion processing corresponding to said plurality of con- 30 
trol function units according to the information inputted 
from said plurality of I/O processing units at least 
belonging to the plurality of divided control function 
groups, and outputting each result of the operation 
processing to the plurality of corresponding I/O pro- 35 
cessing units within the control function group; and 
a communication bus for connecting said plurality of I/O 
processing units to each other and to said plurality of 
operation processing units. 

7. The vehicle-control communication system according 40 
to claim 6 further comprising a scheduler for adjusting 
schedules for transmit- receive of information between said 
plurality of I/O processing units and said plurality of opera- 
tion processing units. 

8. The vehicle-control communication system according 45 
to claim 7; wherein said scheduler is provided in any of said 
plurality of operation processing units. 

9. The vehicle-control communication system according 
to claim 8; wherein each of said plurality of I/O processing 
units and said plurality of operation processing units has at 50 
least a normal mode to shift to a status of a normal 
processing operation and a maintenance mode to shift to a 
status of system maintenance; and 

said scheduler monitors the status of transmission by said 
plurality of I/O processing units and said plurality of 55 
operation processing units, transmits an alarm message 
using said communication unit to said plurality of I/O 
processing units and said plurality of operation pro- 
cessing units when any abnormal condition is detected, 
and shifts said plurality of I/O processing units and said 60 
plurality of operation processing units from the normal 
mode to the maintenance mode. 

10. The vehicle-control communication system according 
to claim 6; wherein a format of information to be transmitted 
and received by said first communication unit, said second 65 
communication unit, and said communication unit is a 
standardized information format. 
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11. The vehicle-control communication system according 
to claim 6; wherein each of said plurality of I/O processing 
units and said plurality of operation processing units further 
comprises an identifying unit for adding identifying infor- 
mation specific to the vehicle-control communication sys- 
tem to information to be transmitted via said first commu- 
nication unit, said second communication unit, and said 
communication unit, transmitting the information, and also 
performing identification of received information. 

12. The vehicle -control communication system according 
to claim 6; wherein each of said plurality of I/O processing 
units and said plurality of operation processing units further 
comprises an encrypting/decrypting unit for encrypting 
information to be transmitted via said first communication 
unit, said second communication unit, and said communi- 
cation unit using an encryption key, and decrypting the 
encrypted information. 

13. A vehicle control system for controlling plural diverse 
vehicle functions comprising: 

at least two vehicle control groups, each said control 
group performing a plural related vehicle functions, 
each said vehicle control group including, 
a group communication bus; 

at least two control functional units, each control func- 
tional unit being connected to said group communi- 
cation bus, each said control functional unit also 
communicating with at least a sensor or actuator and 
performing a vehicle function and having a processor 
communicating with its associated said sensors and 
actuators, 

an operation control node, connected to said commu- 
nication bus and performing operational control of 
said control functional units, said operation control 
node having a control node processor and receiving 
information from and providing information to said 
control functional units on said group communica- 
tion bus; and 

the operation control nodes of each said vehicle control 
group communicating with each other. 

14. The vehicle control system of claim 13 wherein said 
system further comprises a vehicle communication bus 
interconnecting said operation control nodes of said at least 
two vehicle control groups to facilitate communication 
therebetween. 

15. The vehicle control system of claim 14 wherein said 
control node processors are relatively high speed processors 
and said vehicle communication bus has a relatively high 
bandwidth and said group communication bus has a rela- 
tively low bandwidth. 

16. The vehicle communication system of claim 15 
wherein each said control functional unit is connected to 
those sensors and actuators associated therewith and not 
through a said group communication bus. 

17. A vehicle communication system for controlling plu- 
ral diverse vehicle functions, said system comprising: 

at least two control function groups, each control function 
group controlling at least two vehicle functions; 

an operation control unit corresponding to each control 
function group, said operation control unit performing 
operation control for the corresponding control func- 
tion group; 

at least two control function units corresponding to each 
operation control unit, each control function unit pro- 
viding process controls for the control of a vehicle 
function; 

an input/output processing unit corresponding to each 
control function unit, said input/output processing unit 
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receiving process controls from the corresponding con- 
trol function unit and executing the process controls 
including generating vehicle control data; and 
a first communication unit connected between each opera- 
tional control unit and its corresponding control func- s 
tion units, said first communication unit permitting 
mutual communication directly between each control 
function group. 

18. The system of claim 17, wherein the first communi- 
cation unit permits an operation control unit corresponding 

to a first control group to obtain vehicle control data from an 10 
operation control unit of a second control group. 

19. The system of claim 17, further comprising: 

a second communication unit connected between at least 
two input/output processing units and said operation 
control unit; and 15 

said operation control unit receiving vehicle control data 
from each input/output processing unit and directing 
the vehicle control data to the corresponding control 
function unit. 

20. The system of claim 17, wherein the first communi- 20 
cation unit permits each operation control unit to commu- 
nicate with the other operation control units and access data 
from the input/output processing units and the control func- 
tion units. 

21. The system of claim 17, wherein said input/output 2 s 
processing units include sensors for obtaining vehicle func- 
tion data and actuators to adjust vehicle functions into a 
target range. 



22. The system of claim 17, wherein said operation 
control unit receives vehicle control data from said input/ 
output processing units via said second control unit and 
directs said vehicle function data to an appropriate control 
function unit such that there is cooperation between control 
function units. 

23. The system of claim 17, wherein said operation 
control unit transmits vehicle process control instructions 
from each control function unit to said corresponding input/ 
output control processing unit via said second communica- 
tion unit. 

24. The system of claim 17, wherein said first communi- 
cation unit is a communication bus. 

25. The system of claim 17, further comprising: 

a scheduler connected to the first communication unit, 
said scheduler for adjusting schedules for transmit - 
receive of information between said plurality of input/ 
output processing units and said plurality of operation 
processing units. 

26. The system of claim 17, wherein 

a processor is not connected between any of the control 
function groups. 
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